Page 1 of 1

dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Mar 17, 2017 7:12 pm
by LukeExMachina
Not sure how many people have this problem.

I just started with ADRIFT, and I'm greeted to Norton putting the initial setup.exe in quarantine. After I restored it and installed ADRIFT 5.0, I went to start it up, and a Norton pop-up on my laptop comes up stating that dev500.exe and run500.exe are both trojan viruses. Specifically, Trojan.Gen.8!cloud
Soo...... what's up with this? I wouldn't think that this program would be harmful, but is it safe to use this?

If anyone can help, that would be most appreciated :)

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Sun Mar 19, 2017 8:50 pm
by PHatDriver
Hi,

I'm new here. And haven't got norton.
I have avira and comodo and both seem fine
with the runner and developer.

Although, having said that,
I tested making an .exe
and virus total didn't like it at all!

Strange - huh?

I’m not sure how norton works
but you should be able to tell it that both dev500 and run500 are safe.

good luck...

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Mon Mar 20, 2017 3:02 am
by saabie
Most antivirus programs simply don't like any program that is not in their database of known software.
The fact that dev500, run500 and any generated game.exe contain unzip code to decompress the ADRIFT .TAF files makes them doubly suspicious because a lot of trojen programs also contain unzip code.

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Thu Jun 29, 2017 1:37 pm
by Kennedy
Just recently out of the blue My Norton removes dev500.exe. Unfortunately I don't remember the exact message it gave me and I didn't write it down. It just struck me as odd though as I wasn't even using ADRIFT at the time.

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Thu Jun 29, 2017 10:15 pm
by ice_wanted
Known issues:
Please vote it up: http://www.adrift.co/bug/19171

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Jun 30, 2017 12:35 am
by saabie
Norton regularly scans the files on your hard disk using heuristics that it updates several times a day.
If you open the security history and look under "Resolved security risks" it will tell you what caused the problem.
The most common problems with Norton are WS.Reputation.1, which basically rejects anything that is not used by at least 10,000 people, and Heur.AdvML.B which rejects anything containing decompression code that Norton have not white-listed.
I have even had it quarantine nvPerfHud.exe which is a utility program provided by NVIDIA !
The solution is to select dev500.exe in Norton's history, select "More Options" to open the file insight page, then "Options" on that page to open the threat detected page.
Click the "Restore & exclude this file" button to repair ADRIFT and stop Norton from removing it again in the future.

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Jun 30, 2017 7:20 am
by R2T1
This may also have been Norton trying to be proactive following the recent global Ransom-ware attacks.

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Jun 30, 2017 12:50 pm
by Lumin
Malwarebytes is far less intrusive and I've had it so long it always surprises me to be reminded people are still using Norton for some reason.

But never mind that. Instead can we all just stop for a minute and imagine a world where 10000 people are using Adrift?

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Jun 30, 2017 3:04 pm
by P/o Prune
Lumin wrote:(snip) But never mind that. Instead can we all just stop for a minute and imagine a world where 10000 people are using Adrift?

Are you telling me that there isn't such a world? :shock:

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Jun 30, 2017 11:03 pm
by Kennedy
Went through history and it said "Dev500.EXE contained threat heur.advml.b"

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Sat Jul 01, 2017 1:03 am
by R2T1

Re: dev500.exe and run500.exe removed by Norton?

PostPosted: Fri Apr 13, 2018 8:10 am
by Campbell
I think it's the software I use to package the DLLs and exe into a single file (Rugland Packer). It's most likely used by virus creators to hide their viruses. I just need to find a different product to do this.